1488 matches found
CVE-2018-6866
Cross Site Scripting XSS exists in PHP Scripts Mall Learning and Examination Management System Script 2.3.1 via a crafted message...
CVE-2018-6867
Cross Site Scripting XSS exists in PHP Scripts Mall Alibaba Clone Script 1.0.2 via a profile parameter...
CVE-2018-6868
Cross Site Scripting XSS exists in PHP Scripts Mall Slickdeals / DealNews / Groupon Clone Script 3.0.2 via a User Profile Field parameter...
CVE-2018-6866
Cross Site Scripting XSS exists in PHP Scripts Mall Learning and Examination Management System Script 2.3.1 via a crafted message...
CVE-2018-6867
Cross Site Scripting XSS exists in PHP Scripts Mall Alibaba Clone Script 1.0.2 via a profile parameter...
CVE-2018-6868
Cross Site Scripting XSS exists in PHP Scripts Mall Slickdeals / DealNews / Groupon Clone Script 3.0.2 via a User Profile Field parameter...
CVE-2018-6866
CVE-2018-6866 affects PHP Scripts Mall Learning and Examination Management System Script 2.3.1. The connected documents describe a Cross Site Scripting (XSS) vulnerability in the system, exploitable through a crafted message in the messaging feature. PoCs and exploits (e.g., Exploit-DB and 0day l...
CVE-2018-6867
CVE-2018-6867 affects PHP Scripts Mall Alibaba Clone Script 1.0.2. The issue is a Cross-Site Scripting (XSS) vulnerability exploitable via the profile parameter, as described in multiple sources and evidenced by PoC/exploit references (e.g., exploit-db, 0day.today, Packet Storm). Public writeups ...
CVE-2018-6868
CVE-2018-6868 affects PHP Scripts Mall Slickdeals/DealNews/Groupon Clone Script 3.0.2. The issue is a Cross-Site Scripting vulnerability exposed via a User Profile Field parameter in the web app. PoC and multiple public exploits indicate a stored XSS vector, demonstrated in PoC examples (e.g., sc...
CVE-2018-6859: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in PHP Scripts Mall Schools Alert Management Script 2.0.2 via the Login Parameter...
CVE-2018-6868: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS exists in PHP Scripts Mall Slickdeals / DealNews / Groupon Clone Script 3.0.2 via a User Profile Field parameter...
CVE-2018-6867: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS exists in PHP Scripts Mall Alibaba Clone Script 1.0.2 via a profile parameter...
CVE-2018-6866: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS exists in PHP Scripts Mall Learning and Examination Management System Script 2.3.1 via a crafted message...
PT-2018-17792
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Slickdeals / DealNews / Groupon Clone Script version 3.0.2 Description A Cross Site Scripting XSS issue exists, allowing for potential code injection via a User Profile Field parameter. Recommendations For version 3.0.2, avoid...
PT-2018-17784
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Schools Alert Management Script version 2.0.2 Description A SQL Injection issue exists in the Login Parameter, allowing potential exploitation. Recommendations For PHP Scripts Mall Schools Alert Management Script version 2.0.2...
PT-2018-17791
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Alibaba Clone Script version 1.0.2 Description A Cross Site Scripting XSS issue exists, allowing for potential code injection via a profile parameter. Recommendations For PHP Scripts Mall Alibaba Clone Script version 1.0.2,...
CVE-2015-2081
Datto ALTO and SIRIS devices allow Remote Code Execution via unauthenticated requests to PHP scripts...
Remote code execution
Datto ALTO and SIRIS devices allow Remote Code Execution via unauthenticated requests to PHP scripts...